#2024 #En #vulnerability #ssrf

Critical SAP flaw allows remote attackers to bypass authentication

SAP has released its security patch package for August 2024, addressing 17 vulnerabilities, including a critical authentication bypass that could allow remote attackers to fully compromise the system.

#bleepingcomputer #EN #2024 #Authentication-Bypass #SAP #SSRF #Vulnerability #CVE-2024-41730

·bleepingcomputer.com·Aug 13, 2024

Critical SAP flaw allows remote attackers to bypass authentication

Compromising Microsoft's AI Healthcare Chatbot Service

Tenable finds privilege-escalation issues in Azure Health Bot via an SSRF, which allowed access to cross-tenant resources.

#tenable #en #2024 #azure #azure-health-bot #tenable-research #ssrf #vulnerability #cross-tenant-access #artificial-intelligence #ai-security

·tenable.com·Aug 13, 2024

Compromising Microsoft's AI Healthcare Chatbot Service

Hackers exploit Ivanti SSRF flaw to deploy new DSLog backdoor

Hackers are exploiting a server-side request forgery (SSRF) vulnerability in Ivanti Connect Secure, Policy Secure, and ZTA gateways to deploy the new DSLog backdoor on vulnerable devices.

#bleepingcomputer #EN #2024 #Backdoor #Ivanti #Malware #SSRF #Vulnerability #Security #InfoSec #Computer-Security

·bleepingcomputer.com·Feb 13, 2024

Hackers exploit Ivanti SSRF flaw to deploy new DSLog backdoor